Rust Search
Find the best content on Rust, curated by the community; a
search engine for Rustaceans.
While Rust is not as productive as Go and its legendary standard library to write backend services, Rust's rich type system, compiler-enforced correctness and zero-cost abstraction make it a great choice nonetheless, especially for medium-s...
Between user code and rogue AI agents, there recently has been huge regain in interest for sanboxing solutions. We've seen last time how to use landlock to drop the privileges of your own programs, today we are going to see how sanboxing un...
kerkour.com Topics: Rust security, supply chain, cryptography Why RustGrep includes it: Black Hat Rust. Security-focused Rust content. Categories: educator, security, crypto
There aren't many resources about how to actually deliver Rust projects to your users: workflows, security hardening and artifacts management, so here is the checklist I use to release backend services and CLI binaries Makefile I use a Make...
With the recent Bun rewrite from Zig to Rust, I thought that it was the perfect time to pour gas on the fire and explain why you need to stop everything and rewrite all your code in Rust. Just kidding, I'm not here to start any programming...
Now that I have your attention, let's be clear, RustCrypto packages are not "slow", they are probably "fast enough" for your use case. Yet, I couldn't unsee how faster aws-lc-rs is, so here are the results of my investigation. I was doing s...
I'm currently working on a TLS (Transport Layer Security) implementation for stdx (Rust's extended standard library, https://github.com/rust-stdx/stdx ), and one of the main requirements is to be able to use the library on no_std embedded p...
Just last week, the iroh project announced the release of its v1.0. What is iroh? Well, I'm glad you're asking because it's a very interesting project that I'm following for some time now for the technical wizardery they are doing with QUIC...
First, a big thank you to everyone who took the time to read the announcement post and star the stdx repo on GitHub, or even better, purchased one of my books to support my Open Source work. Launching a project is always hard and it's highl...
From embedded firmware (where it's badly needed) to big servers passing by cross-platform applications used by billions of people, the foundations of the entire computing stack are being rewritten in Rust. Unfortunately, most of it is done...
Threads were designed to parallelize compute-intensive tasks. However, these days, a lot of applications (such as a network scanner) are I/O (Input / Output) intensive. Thus, threads have two significant problems: They use a lot of memory (...
Use monorepos My very unscientific analysis of the Rust ecosytem has come to the conclusion that Rust developers are wasting way too much time managing packages and dependencies. Whoever has used crates from the RustCrypto project knows wha...
As a Rust project grows in size, it can take a non-trivial amount of efforts to keep it in a clean state that will not impede your and your co-workers' and agents' productivity due to Rust's package management and module system that is bett...
"Is Rust a good fit for this project?" I get this question quite frequently so I think it's time to write down my thoughts if it can help to avoid some painful and costly mistakes. Short answer: probably not (unless your team is already ful...
The cheapest way to learn is to learn from others, so I always take a day every week to see what other organizations are doing and how they are doing it. As Rust is slowly but surely replacing C / C++ for embedded development, operating sys...
Turso, Neon, Polars, Databend, Materialize, DataFusion, InfluxDB, Quickwit and many more. Outside of DuckDB, PostgreSQL's core and ClickHouse, most of, if not all, the most impactful projects in the database world are now written in Rust. W...
There recently has been a lot of noise about quantum computing breakthroughs after Google's articles Quantum frontiers may be closer than they appear and Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly, followe...
Supply chain attacks are all the rage these days with many high-profile attacks that were carried out against the Python ecosystem (with litellm), JavaScript (with axios) and WordPress in the last month alone. These attacks will inevitably...
An essential part of being able to say "I told you so" is in fact having told you so. Well, here we are. For those living under a rock (lucky you), multiple very popular software packages have been compromised over the past few week, such a...
Over the decades, Humans have proved to be pretty bad at producing bug-free software. Trying to apply our approximative, fuzzy thoughts to perfectly logical computers seems doomed. While the practice of code reviews is increasing, especiall...
"If there’s a backdoor attack lurking in the crates ecosystem, then it’s lurking pretty deep at present. The popular crates that we all rely on day..."